diff options
| author | Jakub Kicinski <kuba@kernel.org> | 2026-06-03 19:15:34 -0700 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-06-03 19:15:34 -0700 |
| commit | 060c1daac7e0d01651cff326c8e0326b3787b272 (patch) | |
| tree | c407a812995141d8817a12eec0b7fa2419209a7f /tools/perf/scripts/python/stackcollapse.py | |
| parent | d20da913083042203221c16bc19bd2f3c12d171f (diff) | |
| parent | 80df409e1a483676826a6c66e693dba6ac507751 (diff) | |
Merge branch 'fix-use-after-free-in-metadata-dst-teardown-in-airoha_eth-and-mtk_eth_soc-drivers'
Lorenzo Bianconi says:
====================
Fix use-after-free in metadata dst teardown in airoha_eth and mtk_eth_soc drivers
airoha_metadata_dst_free() and mtk_free_dev() call metadata_dst_free()
which frees the metadata_dst with kfree() immediately, bypassing the RCU
grace period.
Replace metadata_dst_free() with dst_release() which properly goes
through the refcount path and runs call_rcu_hurry() if refcount goes to
zero.
====================
Link: https://patch.msgid.link/20260602-airoha-mtk-metadata-uaf-fix-v1-0-3aaa99d83351@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python/stackcollapse.py')
0 files changed, 0 insertions, 0 deletions